Privacy & responsible use

A progress record can influence important educational decisions. Its purpose, audience, and limitations need to be clear.

What the public preview does

The working preview uses fictional people, observations, and conversations. Changes are held in your browser tab’s session storage when available; if browser storage is blocked, changes remain in memory and reset on reload. The preview has four staff roles only. Preview role switching is for exploration; it is not a school authentication mechanism. Do not enter real student information. Resetting the preview clears its demonstration state in that tab.

What the school server implements

The source includes email/password sign-in with required school-mode authenticator setup, operator-controlled account recovery and offboarding, server-verified relationships, scoped reads and writes, inactivity and absolute session expiry, versioned evidence, and encrypted workspace payloads in a durable database. Account identifiers and necessary operational metadata are separate from encrypted record payloads. The actual deployment requires secure hosting, secret/key management, backup and restore review, access provisioning, and appropriate monitoring.

School release is a separate decision

No school or district approval, legal certification, or independent security/accessibility certification is claimed. Real student deployment remains blocked by configuration until the operator confirms the required district, privacy, assessment, and security review. A configuration acknowledgement does not itself supply those approvals.

Who sees what

Teachers and support staff require assigned relationships. This edition provides no student or parent accounts, invitation links, portal views, or direct messaging access. Students and families receive reviewed reports prepared and shared by school staff. Designated MTSS coordinators and school leaders can receive an explicitly verified, expiring schoolwide viewing grant. Broad viewing does not permit score editing, restricted-goal access, private-conversation access, or automatic bulk export. Teachers receive the records required for their assignments and relevant issued team actions. Sharing does not replace district policy or statutory record rights.

Records and conversations

Submitted evidence, conversations, and reports can be educational records. The application preserves corrections and published report snapshots. It does not promise legally privileged notes or disappearing messages. School records requests, retention, legal holds, and approved disposition require district procedures; this build does not automate legal destruction of records.

National protections, local responsibility

FERPA limits staff access to records for which they have a legitimate educational interest. IDEA requires an IEP to state how progress toward annual goals will be measured and when it will be reported. School and district agreements, state law, access controls, and records procedures apply to staff-entered information as well. Applicable state and district requirements must be reviewed before implementation.

Downloaded reports require school-controlled storage and delivery. A download is not automatically a disclosure authorization or proof of delivery. Manual delivery records do not replace statutory disclosure logs.

No third-party analytics

No third-party analytics, advertising tracking, session replay, or behavioral profiling is included. Boomerang’s product commitment is to keep student records under school control and never sell them or use them for advertising.

Purposeful data

No advertising trackers, session replay, cross-product student-data transfer, or AI analysis of student personality or authorship is included in this build. Public contact forms must not contain student data. School messages should contain only information relevant to their educational purpose.

Questions and requests

Use the school’s designated records or privacy contact for student-record matters. For product questions, contact drew@boomerangclassroom.com without sending student information.